From 7060f945c1e581c1bc9410e687745dae41602426d04ec74784dbc4c6db90dc37 Mon Sep 17 00:00:00 2001 From: "Marc S. Weidner" Date: Thu, 9 Oct 2025 21:20:11 +0100 Subject: [PATCH] ## V8.13.096.2025.10.09 Signed-off-by: Marc S. Weidner --- config/hooks/live/9996_auditd.chroot | 16 +++++++++++----- config/package-lists/live.list.common.chroot | 1 - 2 files changed, 11 insertions(+), 6 deletions(-) diff --git a/config/hooks/live/9996_auditd.chroot b/config/hooks/live/9996_auditd.chroot index f47c217..6ef837c 100644 --- a/config/hooks/live/9996_auditd.chroot +++ b/config/hooks/live/9996_auditd.chroot @@ -340,16 +340,22 @@ EOF ### Sanity checks: reject empty or malformed rulesets early. -if ! augenrules --check >/dev/null 2>&1; then +if ! /sbin/augenrules --check >/dev/null 2>&1; then - log "ERROR: augenrules --check failed. Please fix /etc/audit/rules.d/*.rules" + log "ERROR: /sbin/augenrules --check failed. Please fix /etc/audit/rules.d/*.rules" exit 1 fi -### This writes '/etc/audit/audit.rules'. -log "Compiling /etc/audit/audit.rules (no load)" -augenrules --no-load +if /sbin/augenrules --load; then + + log "INFO: /sbin/augenrules --load, successful." + +else + + log "ERROR: /sbin/augenrules --load failed." + +fi ### Permissions hardening (augenrules typically sets sane perms; enforce anyway). ### 0600 is conservative; 0640 root:root is also acceptable. diff --git a/config/package-lists/live.list.common.chroot b/config/package-lists/live.list.common.chroot index 51ea5ce..3a25d77 100644 --- a/config/package-lists/live.list.common.chroot +++ b/config/package-lists/live.list.common.chroot @@ -94,7 +94,6 @@ man man-db manpages manpages-dev -mdadm mtr musl-tools nano